Enhanced Due Diligence (EDD): Guide for High-Risk Clients

In brief

Enhanced due diligence (EDD) is mandatory in Belgium when you deal with a politically exposed person (PEP), a client from a high-risk third country on the EU list, or a structure with opaque complexity. It requires in-depth documentary verifications, formal hierarchical approval and more frequent ongoing monitoring than for standard clients. Without EDD when required, administrative sanctions can reach 5 million euros.

Introduction: The Challenges of Enhanced Due Diligence

Enhanced Due Diligence (EDD) is a legal obligation for domiciliation centers when dealing with clients presenting an increased risk of money laundering or terrorist financing.

Unlike standard due diligence (CDD), EDD requires in-depth verification measures: additional analyses, collection of supplementary documents, reinforced continuous monitoring, and validation by compliance officers.

> ⚠️ Warning: Failure to apply EDD when required exposes your center to administrative sanctions of €50,000 to €5 million (Article 91 of the law of September 18, 2017).

Legal Framework: When is EDD Mandatory?

Legal Basis in Belgium

The law of September 18, 2017 on the prevention of money laundering and terrorist financing requires EDD in the following situations (Article 27). This obligation is part of the overall AML risk assessment methodology that every regulated entity must document, and the collected documents complement the mandatory KYC file:

High-Risk Countries (EU List - 2026)

Currently high-risk countries (April 2026):

• Afghanistan, North Korea, Iran, Myanmar (Burma)

• Syria, Yemen, Pakistan

• Bahamas, Panama, Turkey, Democratic Republic of Congo, Uganda

• Haiti, Jamaica, Philippines, Cayman Islands

> 🔗 Updated official list: EUR-Lex Delegated Regulations

Who Are High-Risk Clients?

1. Politically Exposed Persons (PEPs)

Legal definition: A PEP is someone who exercises or has exercised important public functions:

Domestic PEPs (Belgium):

• Members of federal or regional government

• Members of Parliament (Chamber, Senate, regional parliaments)

• Members of the Constitutional Court

• Province governors, mayors of large cities

• Leaders of public companies (SNCB, Bpost, etc.)

Foreign PEPs:

• Heads of State or government

• Ministers and deputy ministers

• Ambassadors, supreme court judges

• Central bank leaders

PEPs by association:

• Immediate family members: spouse, partner, children, parents

• Close associates: known business partners, nominees

> 💡 Important nuance: PEP status remains for at least 18 months after the end of the mandate.

2. Complex and Opaque Structures

Characteristics of a risky structure:

• Multi-level holdings (>3 levels of parent companies)

• Offshore companies in tax havens (British Virgin Islands, Delaware, etc.)

• Trusts with undisclosed beneficiaries

• Shell companies without apparent economic activity

• Nominee directors (professional nominees)

#### Detection with Company Belgium API

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

async function analyzeStructureComplexity(enterpriseNumber: string) {
  const company = await client.companies.get(enterpriseNumber);
  
  class="code-comment">// Complexity indicators
  const riskIndicators = {
    multipleEstablishments: company.establishments.length > 5,
    foreignJurisdiction: company.juridicalForm?.includes(class="code-string">'foreign'),
    recentCreation: isWithinLastYear(company.startDate),
    addressMismatch: company.addresses.some(a => a.type === class="code-string">'CORRESPONDENCE' && 
                                               a.country !== class="code-string">'BE'),
    multipleActivities: company.activities.length > 10,
  };
  
  class="code-comment">// UBO analysis
  const ubo = await client.companies.getUBO(enterpriseNumber);
  const uboRisks = {
    noUBODeclared: !ubo || ubo.beneficiaries.length === 0,
    foreignUBOs: ubo?.beneficiaries.filter(b => b.nationality !== class="code-string">'BE').length || 0,
    complexOwnership: ubo?.ownershipChain?.length > 2,
  };
  
  const complexityScore = calculateComplexityScore(riskIndicators, uboRisks);
  
  return {
    complexityScore,
    requiresEDD: complexityScore >= 60,
    riskIndicators,
    uboRisks,
    recommendation: complexityScore >= 80 ? 
      class="code-string">'EDD mandatory + senior management approval' : 
      class="code-string">'EDD recommended',
  };
}

EDD Measures: What to Do Concretely?

Level 1: Enhanced Documentary Due Diligence

#### Additional Documents to Collect

For a PEP:

For high-risk countries:

For complex structures:

Level 2: In-Depth Verifications

#### Open-Source Intelligence (OSINT)

Perform systematic searches:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

async function performOSINTChecks(client: Client) {
  const searches = [
    class="code-comment">// 1. Search engines
    class="code-string">`class="code-string">"${client.companyName}" + class="code-string">"scandal" + class="code-string">"fraud" + class="code-string">"investigation"`,
    class="code-string">`class="code-string">"${client.companyName}" + class="code-string">"sanctions" + class="code-string">"embargo"`,
    
    class="code-comment">// 2. Sanctions databases
    class="code-string">'OFAC SDN List', class="code-comment">// US Treasury
    class="code-string">'EU Consolidated Sanctions List',
    class="code-string">'UN Security Council Sanctions List',
    
    class="code-comment">// 3. Specialized press
    class="code-string">'ICIJ Offshore Leaks Database',
    class="code-string">'Panama Papers',
    class="code-string">'Pandora Papers',
  ];
  
  const findings = [];
  
  for (const search of searches) {
    const results = await performSearch(search, client);
    if (results.adverseMediaCount > 0) {
      findings.push({
        source: search,
        count: results.adverseMediaCount,
        severity: results.maxSeverity,
        articles: results.topArticles.slice(0, 5),
      });
    }
  }
  
  return {
    adverseMediaDetected: findings.length > 0,
    findings,
    riskLevel: calculateAdverseMediaRisk(findings),
  };
}

Level 3: Hierarchical Approval

EDD requires formal approval by:

Level 4: Ongoing Enhanced Monitoring

EDD doesn't stop at onboarding! Continuous monitoring required:

#### Automated Monitoring

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

async function continuousMonitoring() {
  const eddClients = await db.clients.find({ requiresEDD: true, status: class="code-string">'ACTIVE' });
  
  for (const client of eddClients) {
    class="code-comment">// 1. Check changes in Company Belgium
    const companyChanges = await companyBelgiumClient.companies.getChanges(
      client.enterpriseNumber,
      { since: client.lastEDDReviewDate }
    );
    
    class="code-comment">// 2. Re-run sanctions screening
    const sanctionsCheck = await complyAdvantageClient.screen(client);
    
    class="code-comment">// 3. Monitor negative media
    const adverseMedia = await googleNewsClient.search(
      class="code-string">`class="code-string">"${client.companyName}" + (fraud OR corruption OR scandal)`,
      { since: client.lastEDDReviewDate }
    );
    
    class="code-comment">// 4. Trigger alert if necessary
    if (companyChanges.length > 0 || sanctionsCheck.newMatches || adverseMedia.results.length > 0) {
      await triggerEDDReview({
        client,
        triggers: { companyChanges, sanctionsCheck, adverseMedia },
        urgency: calculateUrgency(sanctionsCheck, adverseMedia),
      });
    }
  }
}

class="code-comment">// Daily cron job
schedule(class="code-string">'0 2 * * *', continuousMonitoring); class="code-comment">// 2 AM

Documentation Retention

Legal Retention Period

10 years minimum from the end of the business relationship (Article 34, law 18/09/2017):

• All identification documents

• EDD reports and approvals

• Correspondence with the client

• Transactions and financial flows

Mandatory Disclosures to CTIF

When to Disclose?

EDD may reveal suspicious transactions requiring a CTIF disclosure:

- Reluctance to provide documents

- Inconsistencies in statements

- Source of funds not satisfactorily proven

- Customer refusal to cooperate

- Clearly falsified documents

- Proven links with sanctioned persons

> ⚠️ Important: Disclosure to CTIF DOES NOT PROHIBIT accepting the client. It's up to CTIF to decide whether to investigate.

Conclusion

Enhanced Due Diligence may seem time-consuming and costly, but it's an indispensable investment:

✅ Legal compliance: avoids sanctions of €50k to €5M

✅ Reputation risk reduction: no "Panama Papers" scandal involving you

✅ Criminal protection: proves your diligence in case of investigation

✅ Acceptance of premium clients: PEPs and international companies generate high revenues

Start Your Digital EDD Transformation

👉 Contact us or Download our complete EDD guide (PDF)

---

Related articles:

• AML/KYC Compliance for Domiciliation Centers

• UBO Register: Complete Guide

• Law of September 18, 2017 Explained